Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3332203d3e20323635323639.roa
File:                     3136382e39302e38382e302f32322d3332203d3e20323635323639.roa (raw, json)
Hash identifier:          aVDPbpZ66whYXMJ0PdAh7hlw52lFI+Pve4SjTG3u8UY=
Subject key identifier:   48:44:5A:2B:96:C2:25:0B:36:8C:08:3B:61:22:AA:F6:88:09:B0:FF
Certificate issuer:       /CN=FA12FB62D4F53CB5136A67195B17917F37FA7160
Certificate serial:       7DCEF5343F27AAE398FAC4AE26A0C275E7018CB3
Authority key identifier: FA:12:FB:62:D4:F5:3C:B5:13:6A:67:19:5B:17:91:7F:37:FA:71:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA12FB62D4F53CB5136A67195B17917F37FA7160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3332203d3e20323635323639.roa
Signing time:             Fri 06 Jun 2025 15:25:50 +0000
ROA not before:           Fri 06 Jun 2025 15:20:50 +0000
ROA not after:            Fri 05 Jun 2026 15:25:50 +0000
asID:                     265269
IP address blocks:        168.90.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/FA12FB62D4F53CB5136A67195B17917F37FA7160.crl
                          rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/FA12FB62D4F53CB5136A67195B17917F37FA7160.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA12FB62D4F53CB5136A67195B17917F37FA7160.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 08:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ce:f5:34:3f:27:aa:e3:98:fa:c4:ae:26:a0:c2:75:e7:01:8c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA12FB62D4F53CB5136A67195B17917F37FA7160
        Validity
            Not Before: Jun  6 15:20:50 2025 GMT
            Not After : Jun  5 15:25:50 2026 GMT
        Subject: CN=48445A2B96C2250B368C083B6122AAF68809B0FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fd:10:e3:4a:23:66:6a:7e:25:38:20:c0:f5:
                    78:f7:ea:ea:f4:3b:a3:e3:2a:da:e4:27:d5:b6:3f:
                    f6:a5:a0:41:78:a9:5d:30:f8:ac:12:7b:a7:b5:83:
                    ce:3a:41:11:bc:02:cd:5e:fb:9f:a2:45:39:aa:0c:
                    cf:47:3b:38:78:ff:7c:4b:f8:dc:9e:3b:ca:3c:bb:
                    c6:2b:f0:a1:1a:a2:09:34:94:9e:6a:f9:91:88:9e:
                    0e:7e:ca:e8:67:f6:38:5e:33:95:a4:b9:a5:b0:f7:
                    14:45:fd:e8:9a:37:44:bd:eb:93:fc:bc:03:3a:70:
                    94:ce:be:dc:ac:1e:ec:72:6e:d4:3b:58:29:d9:d5:
                    0f:c0:b3:c8:dc:a3:78:15:d2:e2:e8:ff:8d:1b:a9:
                    0f:cf:cd:f3:dd:18:07:86:39:9f:0f:d2:61:3a:da:
                    a5:b2:42:40:9e:1f:15:21:bb:e2:8a:81:66:84:5d:
                    5c:53:1e:29:b8:82:2d:50:56:15:0d:18:f4:b1:ce:
                    1c:76:86:2f:87:fa:35:60:5a:38:97:9a:4d:96:0e:
                    be:97:4c:7c:97:5d:cd:08:05:b2:f8:24:4c:86:94:
                    c5:1e:ac:c9:8d:81:4f:bc:05:2e:16:a5:5f:7e:fb:
                    6c:07:8d:a9:45:05:d3:ac:21:6e:77:b8:9f:ca:22:
                    83:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:44:5A:2B:96:C2:25:0B:36:8C:08:3B:61:22:AA:F6:88:09:B0:FF
            X509v3 Authority Key Identifier:
                keyid:FA:12:FB:62:D4:F5:3C:B5:13:6A:67:19:5B:17:91:7F:37:FA:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/FA12FB62D4F53CB5136A67195B17917F37FA7160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA12FB62D4F53CB5136A67195B17917F37FA7160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/3136382e39302e38382e302f32322d3332203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:19:8c:2f:7d:5f:2e:45:f7:ce:4d:14:a1:1a:59:87:41:db:
         44:68:7d:e5:33:d1:ce:af:74:29:f3:26:b6:a8:90:e1:11:09:
         a5:16:a9:2c:e0:da:af:fa:e6:16:c2:83:f8:65:38:a0:3e:4a:
         0d:dd:d7:3e:e6:25:22:88:cd:e0:f2:36:80:1d:7d:ec:21:5a:
         73:df:1c:e2:00:d7:35:47:51:73:82:62:f3:9a:41:fe:11:45:
         96:79:53:91:68:b2:15:3e:77:07:60:e4:e0:32:98:4d:2e:90:
         83:a2:0e:d7:72:fc:85:16:4c:32:41:f4:4f:2d:99:00:ad:8d:
         3d:7e:1e:42:32:d6:a7:45:37:cb:25:39:2e:d3:4e:ed:dc:77:
         a2:dc:d1:05:17:b9:aa:9e:78:32:0d:dc:e2:ee:d0:60:ee:c3:
         29:fe:85:41:a2:95:86:83:87:8e:b8:8d:43:46:93:83:36:cd:
         b4:48:3a:da:35:50:8c:68:0e:0d:1f:97:83:22:86:50:e9:4e:
         11:03:e3:4d:af:e4:c8:52:22:08:d1:c0:ea:32:07:23:97:1a:
         48:eb:af:f0:f8:86:f6:d8:04:0a:ed:19:9c:c8:bd:4f:fd:e0:
         76:b6:ce:ae:19:c8:f4:db:cb:34:0b:eb:e6:dc:4b:1e:dc:3e:
         6f:fc:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:29:56 2025 by rpki-client